VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288048 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-39481 | redhat_vex | kernel: media: mc: Fix graph walk in media_pipeline_start | known not affected: 198 | 2026-08-04T18:47:53+00:00 | Vulnerability · Source |
| CVE-2024-39487 | redhat_vex | kernel: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() | fixed: 429 known affected: 64 known not affected: 8 | 2026-08-04T18:47:48+00:00 | Vulnerability · Source |
| CVE-2024-38606 | redhat_vex | kernel: crypto: qat - validate slices count returned by FW | known affected: 108 known not affected: 90 | 2026-08-04T18:47:47+00:00 | Vulnerability · Source |
| CVE-2024-39494 | redhat_vex | kernel: ima: Fix use-after-free on a dentry's dname.name | known affected: 198 | 2026-08-04T18:47:45+00:00 | Vulnerability · Source |
| CVE-2024-40909 | redhat_vex | kernel: bpf: Fix a potential use-after-free in bpf_link_free() | known affected: 28 known not affected: 170 | 2026-08-04T18:47:39+00:00 | Vulnerability · Source |
| CVE-2024-39500 | redhat_vex | kernel: sock_map: avoid race between sock_map_close and sk_psock_put | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T18:47:36+00:00 | Vulnerability · Source |
| CVE-2024-39292 | redhat_vex | kernel: um: Add winch to winch_handlers before registering winch IRQ | known not affected: 198 | 2026-08-04T18:47:35+00:00 | Vulnerability · Source |
| CVE-2024-39467 | redhat_vex | kernel: f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() | known not affected: 198 | 2026-08-04T18:47:31+00:00 | Vulnerability · Source |
| CVE-2024-38612 | redhat_vex | kernel: ipv6: sr: fix invalid unregister error path | fixed: 280 known affected: 38 known not affected: 82 | 2026-08-04T18:47:30+00:00 | Vulnerability · Source |
| CVE-2024-38659 | redhat_vex | kernel: enic: Validate length of nl attributes in enic_set_vf_port | known affected: 14 known not affected: 184 | 2026-08-04T18:47:29+00:00 | Vulnerability · Source |
| CVE-2024-39507 | redhat_vex | kernel: net: hns3: fix kernel crash problem in concurrent scenario | fixed: 559 known affected: 22 known not affected: 98 | 2026-08-04T18:47:25+00:00 | Vulnerability · Source |
| CVE-2024-40925 | redhat_vex | kernel: block: fix request.queuelist usage in flush | fixed: 280 known affected: 50 known not affected: 70 | 2026-08-04T18:47:23+00:00 | Vulnerability · Source |
| CVE-2024-40907 | redhat_vex | kernel: ionic: fix kernel panic in XDP_TX action | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T18:47:17+00:00 | Vulnerability · Source |
| CVE-2024-39293 | redhat_vex | kernel: Revert "xsk: Support redirect to any socket bound to the same umem" | known affected: 48 known not affected: 150 | 2026-08-04T18:47:14+00:00 | Vulnerability · Source |
| CVE-2024-38623 | redhat_vex | kernel: fs/ntfs3: Use variable length array instead of fixed size | known not affected: 198 | 2026-08-04T18:47:13+00:00 | Vulnerability · Source |
| CVE-2024-40911 | redhat_vex | kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station | fixed: 429 known affected: 64 | 2026-08-04T18:47:12+00:00 | Vulnerability · Source |
| CVE-2024-38610 | redhat_vex | kernel: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() | known not affected: 198 | 2026-08-04T18:47:09+00:00 | Vulnerability · Source |
| CVE-2024-40957 | redhat_vex | kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors | fixed: 279 known affected: 64 known not affected: 48 | 2026-08-04T18:47:01+00:00 | Vulnerability · Source |
| CVE-2016-6309 | redhat_vex | openssl: Use After Free for large message sizes | known not affected: 23 | 2026-08-04T18:46:59+00:00 | Vulnerability · Source |
| CVE-2015-8392 | redhat_vex | pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27) | fixed: 339 known not affected: 95 | 2026-08-04T18:46:57+00:00 | Vulnerability · Source |
| CVE-2016-2141 | redhat_vex | JGroups: Authorization bypass | fixed: 329 known affected: 4 known not affected: 3 | 2026-08-04T18:46:55+00:00 | Vulnerability · Source |
| CVE-2016-2510 | redhat_vex | bsh2: remote code execution via deserialization | fixed: 6 known affected: 4 known not affected: 2 | 2026-08-04T18:46:53+00:00 | Vulnerability · Source |
| CVE-2016-1240 | redhat_vex | tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation | fixed: 99 known affected: 16 known not affected: 34 | 2026-08-04T18:46:49+00:00 | Vulnerability · Source |
| CVE-2016-5425 | redhat_vex | tomcat: Local privilege escalation via systemd-tmpfiles service | fixed: 50 known not affected: 41 | 2026-08-04T18:46:46+00:00 | Vulnerability · Source |
| CVE-2016-2108 | redhat_vex | openssl: Memory corruption in the ASN.1 encoder | fixed: 367 known affected: 8 known not affected: 2 | 2026-08-04T18:46:44+00:00 | Vulnerability · Source |
| CVE-2016-0800 | redhat_vex | SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN) | fixed: 443 known affected: 6 known not affected: 14 | 2026-08-04T18:46:41+00:00 | Vulnerability · Source |
| CVE-2015-8385 | redhat_vex | pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30) | fixed: 415 known affected: 55 known not affected: 35 | 2026-08-04T18:46:40+00:00 | Vulnerability · Source |
| CVE-2016-4000 | redhat_vex | jython: Unsafe deserialization leads to code execution | known affected: 2 known not affected: 9 | 2026-08-04T18:46:38+00:00 | Vulnerability · Source |
| CVE-2015-8383 | redhat_vex | pcre: Buffer overflow caused by repeated conditional group (8.38/3) | fixed: 339 known not affected: 95 | 2026-08-04T18:46:02+00:00 | Vulnerability · Source |
| CVE-2016-5397 | redhat_vex | thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands | fixed: 2 known affected: 6 known not affected: 17 | 2026-08-04T18:45:49+00:00 | Vulnerability · Source |
| CVE-2015-8384 | redhat_vex | pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4) | fixed: 339 known not affected: 95 | 2026-08-04T18:45:37+00:00 | Vulnerability · Source |
| CVE-2015-8395 | redhat_vex | pcre: Buffer overflow caused by duplicate named references (8.38/36) | fixed: 339 known not affected: 95 | 2026-08-04T18:45:10+00:00 | Vulnerability · Source |
| CVE-2016-1283 | redhat_vex | pcre: heap buffer overflow in handling of duplicate named groups (8.39/14) | fixed: 88 known affected: 62 known not affected: 95 | 2026-08-04T18:45:03+00:00 | Vulnerability · Source |
| CVE-2016-5003 | redhat_vex | xmlrpc: Deserialization of untrusted Java object through <ex:serializable> tag | fixed: 87 known affected: 5 known not affected: 2 | 2026-08-04T18:44:24+00:00 | Vulnerability · Source |
| CVE-2024-41051 | redhat_vex | kernel: cachefiles: wait for ondemand_object_worker to finish when dropping object | known not affected: 198 | 2026-08-04T18:43:45+00:00 | Vulnerability · Source |
| CVE-2024-41017 | redhat_vex | kernel: jfs: don't walk off the end of ealist | known affected: 14 known not affected: 184 | 2026-08-04T18:43:44+00:00 | Vulnerability · Source |
| CVE-2024-41038 | redhat_vex | kernel: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers | fixed: 709 known affected: 22 known not affected: 50 | 2026-08-04T18:43:42+00:00 | Vulnerability · Source |
| CVE-2024-40991 | redhat_vex | kernel: dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id() | known not affected: 198 | 2026-08-04T18:43:39+00:00 | Vulnerability · Source |
| CVE-2024-41056 | redhat_vex | kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files | fixed: 943 known affected: 22 known not affected: 51 | 2026-08-04T18:43:37+00:00 | Vulnerability · Source |
| CVE-2024-41049 | redhat_vex | kernel: filelock: fix potential use-after-free in posix_lock_inode | fixed: 792 known affected: 50 known not affected: 72 | 2026-08-04T18:43:37+00:00 | Vulnerability · Source |
| CVE-2024-41015 | redhat_vex | kernel: ocfs2: add bounds checking to ocfs2_check_dir_entry() | known not affected: 198 | 2026-08-04T18:43:31+00:00 | Vulnerability · Source |
| CVE-2024-40953 | redhat_vex | kernel: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() | known not affected: 198 | 2026-08-04T18:43:28+00:00 | Vulnerability · Source |
| CVE-2024-41069 | redhat_vex | kernel: ASoC: topology: Fix references to freed memory | known affected: 184 known not affected: 14 | 2026-08-04T18:43:26+00:00 | Vulnerability · Source |
| CVE-2024-41032 | redhat_vex | kernel: mm: vmalloc: check if a hash-index is in cpu_possible_mask | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:43:23+00:00 | Vulnerability · Source |
| CVE-2024-40937 | redhat_vex | kernel: gve: Clear napi->skb before dev_kfree_skb_any() | known affected: 156 known not affected: 42 | 2026-08-04T18:43:22+00:00 | Vulnerability · Source |
| CVE-2024-40970 | redhat_vex | kernel: Avoid hw_desc array overrun in dw-axi-dmac | known not affected: 198 | 2026-08-04T18:43:21+00:00 | Vulnerability · Source |
| CVE-2024-40949 | redhat_vex | kernel: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio | known affected: 42 known not affected: 156 | 2026-08-04T18:43:18+00:00 | Vulnerability · Source |
| CVE-2024-41057 | redhat_vex | kernel: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:43:14+00:00 | Vulnerability · Source |
| CVE-2024-41026 | redhat_vex | kernel: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length | known not affected: 198 | 2026-08-04T18:43:13+00:00 | Vulnerability · Source |
| CVE-2024-41062 | redhat_vex | kernel: bluetooth/l2cap: sync sock recv cb and release | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T18:43:10+00:00 | Vulnerability · Source |